Secure Multicluster Istio Configuration Using GitOps...
summary
Shows how to manage secure multicluster Istio by treating CRDs as GitOps source of truth and letting a GitOps controller prevent drift while a progressive-delivery controller handles dynamic canaries. Uses Argo CD + Argo Rollouts (mentions Flagger), Gloo Mesh translates to Istio CRDs, Prometheus for metrics-driven rollouts, and Kyverno/OPA for policy checks and webhook validation. Claim: runs in production at hundreds of clusters and supports automated rollback and remediation.
AI-written summary · about
chapters (7)
- 0:00Introductions
- 1:00Istio and service mesh
- 3:06GitOps and governance
- 5:53GitOps for policy enforcement
- 9:57Progressive delivery
- 13:05Scaling and best practices
- 15:54Q&A session
related talks
43mConfiguration as Data, GitOps and Multi Cluster The Key to Successful Servic
38mGitOps for Istio - Manage Istio Config like Code
07mIntroduction to GitOps
30mManage your kubernetes cluster in the GITOPS way !!
24mNavigating the Maze of Multi-Cluster Istio: Lessons Learned at Scale
27mSecure by Design: Embedding DevSecOps into Your GitOps Workflows
29mCombining Progressive Delivery with GitOps and Continuous Delivery
30mDeclarative by Default, Secure by Design: GitOps as a Control Plane for Governance